$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa File: PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa (raw, json) Hash identifier: nl69Vwc7Td7LX6u4t/To+Vp1M4AGBZurf3QoUvxeeaY= Subject key identifier: 3E:C3:BF:65:87:3B:7F:ED:12:D2:AA:80:2E:49:B6:4C:6D:64:26:68 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa Signing time: Fri 01 Sep 2023 10:05:43 +0000 ROA not before: Fri 01 Sep 2023 10:05:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.205.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10434 (0x28c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3EC3BF65873B7FED12D2AA802E49B64C6D642668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:0a:32:10:5e:30:4e:6a:df:6a:b0:06:82: 69:2f:42:fb:8e:8c:2b:55:c7:97:39:02:6d:4a:cd: 20:be:25:11:5c:1e:a2:53:b5:82:36:46:90:29:54: 1a:8d:fe:1f:cf:50:e7:06:58:be:aa:35:ea:99:b0: 6c:3e:38:02:f2:ef:8c:a0:a1:13:0d:88:32:49:f5: ad:f7:cc:f8:a5:6e:cb:88:07:e2:97:ce:b2:bf:67: 81:e5:41:68:98:83:c4:54:6b:f8:1d:60:e5:76:e2: bc:58:47:7f:fa:4c:c2:eb:58:0c:9f:80:b2:79:00: f2:f5:08:c7:c7:e7:6c:b6:2d:36:92:ca:5b:d0:99: 67:37:c6:ba:ae:90:8e:7a:23:19:da:dc:34:0b:75: 80:85:26:dd:21:29:9c:34:0d:0f:ef:36:05:2c:86: 3b:17:cd:34:38:ab:e6:ce:10:9c:e6:0a:2c:99:32: fc:4d:ba:0b:5c:9e:00:8d:d6:2c:d1:e8:05:bc:69: 43:10:10:66:2c:85:26:1f:10:37:80:a2:e8:86:cd: 66:9f:45:52:5b:0f:5b:a8:ea:e9:2c:1d:52:d5:b8: 1d:e0:55:aa:e5:d3:d5:53:d0:77:cb:4d:4a:85:e5: 7b:50:ee:d6:73:ff:90:93:f6:33:00:6f:6f:c5:e8: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C3:BF:65:87:3B:7F:ED:12:D2:AA:80:2E:49:B6:4C:6D:64:26:68 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.205.64/26 Signature Algorithm: sha256WithRSAEncryption 58:52:b2:31:8b:d3:ee:92:95:86:7f:97:a0:73:a1:9f:9a:2e: c4:ab:01:91:aa:ed:1e:6c:20:72:fa:c0:33:14:86:f7:51:3e: f7:9f:fa:55:0e:be:9d:e3:7f:80:00:47:e4:12:65:e8:0f:62: 0d:34:68:e5:2e:ad:c0:ed:88:88:44:9b:a4:bb:a1:4b:02:56: 89:0a:32:8e:e0:59:72:d0:54:79:b2:27:af:88:41:cc:27:00: 6b:e2:02:c6:08:0f:ad:24:96:50:5f:06:8b:9f:48:04:fb:21: 62:ff:2a:6e:70:08:b4:ab:8b:37:f6:f1:ae:f1:69:36:f4:fd: 3e:31:78:0b:92:66:69:61:1d:12:e8:17:40:2f:21:1c:3a:6d: b4:6a:5a:10:92:b2:35:af:97:ae:7a:fa:cf:10:d9:9f:85:12: 01:35:a5:06:a0:66:f9:33:48:d8:b6:3f:30:12:6f:89:aa:a0: 7b:b5:a4:ab:e5:33:13:81:e7:5e:85:3a:e1:c4:33:b0:1a:fc: bd:9f:2e:fd:86:37:62:f4:a1:b0:e7:78:9d:10:e0:8f:10:5b: a2:4d:42:a3:ad:b0:61:4f:ea:11:59:7f:83:52:14:0c:d5:3a: 32:81:f2:82:ac:d5:02:a6:a4:fe:e2:b8:11:15:d2:9d:8b:c0: 26:9e:77:0b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNFQzNCRjY1ODczQjdG RUQxMkQyQUE4MDJFNDlCNjRDNkQ2NDI2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfvgoyEF4wTmrfarAGgmkvQvuOjCtVx5c5Am1KzSC+JRFcHqJT tYI2RpApVBqN/h/PUOcGWL6qNeqZsGw+OALy74ygoRMNiDJJ9a33zPilbsuIB+KX zrK/Z4HlQWiYg8RUa/gdYOV24rxYR3/6TMLrWAyfgLJ5APL1CMfH52y2LTaSylvQ mWc3xrqukI56Ixna3DQLdYCFJt0hKZw0DQ/vNgUshjsXzTQ4q+bOEJzmCiyZMvxN ugtcngCN1izR6AW8aUMQEGYshSYfEDeAouiGzWafRVJbD1uo6uksHVLVuB3gVarl 09VT0HfLTUqF5XtQ7tZz/5CT9jMAb2/F6Bo5AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUPsO/ZYc7f+0S0qqALkm2TG1kJmgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BzT19aWWM3Zi0wUzBxcUFM a20yVEcxa0ptZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 ws1AMA0GCSqGSIb3DQEBCwUAA4IBAQBYUrIxi9PukpWGf5egc6Gfmi7EqwGRqu0e bCBy+sAzFIb3UT73n/pVDr6d43+AAEfkEmXoD2INNGjlLq3A7YiIRJuku6FLAlaJ CjKO4Fly0FR5sieviEHMJwBr4gLGCA+tJJZQXwaLn0gE+yFi/ypucAi0q4s39vGu 8Wk29P0+MXgLkmZpYR0S6BdALyEcOm20aloQkrI1r5euevrPENmfhRIBNaUGoGb5 M0jYtj8wEm+JqqB7taSr5TMTgedehTrhxDOwGvy9ny79hjdi9KGw53idEOCPEFui TUKjrbBhT+oRWX+DUhQM1ToygfKCrNUCpqT+4rgRFdKdi8AmnncL -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org